Struct CsrfService 

pub struct CsrfService { /* private fields */ }

HMAC-backed CSRF token issuer and verifier.

Production applications must inject the same secret into every application instance and rotate it independently from session records. The token is suitable for a signed double-submit cookie flow when the cookie and request header values are compared by the HTTP adapter.

Implementations

impl CsrfService

pub fn new(secret: impl Into<Vec<u8>>) -> Result<Self, SessionError>

pub fn issue(&self, session_id: SessionId) -> CsrfToken

pub fn verify( &self, session_id: SessionId, token: &CsrfToken, ) -> Result<(), SessionError>

Trait Implementations

impl Clone for CsrfService

fn clone(&self) -> CsrfService

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CsrfService

fn fmt(&self, formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.